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1. Introduction 

The BB84 protocol proposed by Bennett and Brassard |T] has been known as a famous 
protocol guaranteeing information theoretical security. Its security has been proved 
by Mayers [2] in the single-photon case. However, implemented channels usually have 
imperfect quantum state generators, which generate not a perfect single-photon but a 
mixture of the vacuum state, the single-photon state, and the multi-photon state. In 
fact, many implemented quantum communication systems are equipped with phase- 
randomized weak coherent light, which can be regarded as the above type of mixed 
state [31 HI El El [7] . In order to guarantee the security in the above imperfect quantum 
communication systems, Gottesman et al. (GLLP)|8J, and Inamori et al. (ILM)[9] 
have obtained a useful formula for the asymptotic key generation (AKG) rate, which 
needs the counting rate and the phase error rate of single photon state. If we treat 
the worst case of these parameters, the obtained AKG rate become worse. In order to 
estimate these parameters properly, Hwang proposed the decoy method, in which 
we randomly choose different intensities of the coherent light. In the decoy method, a 
pulse for final key generation is called the signal pulse while a pulse only for estimation 
of these parameters is called a decoy pulse. When k intensities are choosed for decoy 
pulses, we need to prepare k + 1 intensities. Therefore, as was pointed out by Lo et 
al.pj], for the estimation of the counting rate of single photon state, we have to treat 
an infinite number of the unknown parameters only with k + 1 equations even if the 
counting rates of individual number states do not depend on the basis. (Note that the 
counting rates for multi-photon states depend on the basis as well as the number of 
photon. However, we consider this special case for simplicity in introduction.) In this 
case, its estimate can be derived from the restriction for all unknown parameters. Hence, 
lager number of intensities yields a more precise estimate of the counting rate of single 
photon state. The phase error rate of single photon state has the same characterization. 

In order to reduce the cost of its realization, Wang [12] proposed to choose the 
minimum decoy intensity to be the vacuum. By using this idea, QKD system can be 
implemented with k kinds of intensities essentially. In the following, we adopt this 
assumption. In the case of k = 2, Wang [12] also proposed an expansion of the phase- 
randomized coherent states Y^=o^~^~\ n ){ n \i which describe the signal pulse and the 
decoy pulses. His expansion is different from the conventional expansion by number 
states in that the signal and decoy states can be described by stochastic mixtures of 
at most four states. Under his expansion, we obtain three constraint equations with 
four unknown parameters. He derived an estimate of the counting rate of the single 
photon state. Ma et al. [13] also derived the same estimate by a different method. Ma et 
al.|13j and Wang [H] obtained an estimate of the phase error rate of the single photon 
state, and completed the estimation of AKG rate in the case of k = 2, independently. 
Ma et al.[T5] pointed out that if the second smallest intensity goes to 0, the required 
parameters can be solved perfectly. So, we obtain the best AKG rate, which is called the 
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universal upper bounqg. However, as was mentioned by them, it is impossible to control 
the infinitesimal intensity. Further, even if it is possible, if we choose small intensity, 
we cannot estimate the required parameters properly because the infinitesimal intensity 
makes our estimate fragile for statistical fluctuation. Thus, for a precise estimate, we 
need to fix the minimum difference between two intensities. That is, it is suitable to 
compare the qualities of our estimates by changing the number of decoy intensities under 
this constraint. For a good survey, please see Wang [15]. 

Now, we trun to the improvement of AKG rate. After GLLP-ILM's result, Lo[T6] 
conjectured an improvement of their AKG rate with a rough idea of its proof. Based 
on his conjecture, Boileau-Batuwantudawe-Laflamme (BBL)[T7j discussed a further 
improvement of the rate by taking into account the effects of dark counts in the detector. 
They pointed out that the AKG rate in the forward error correction case is different 
with respect to that in the reverse case. In the following, these rates will be called 
BBL formulas. Lo's conjecture has been proved by Hayashi [22] and Koashi |18j . 
independently. Hence, it is suitable to apply these formulas to the decoy method. 

In this paper, we treat the case of arbitrary number k of decoy intensities with BBL 
formulas when the intensity can be controlled^. For this purpose, we generalize Wang's 
expansion of the phase-randomized coherent states, in which k + 1 phase-randomized 
coherent states are given by convex combinations of k + 2 states, which are called basis 
states. The idea of this generalization is trivial, however, it is not trivial to derive the 
concrete forms of k + 2 basis states and to check their positivity. It is also needed to 
give the AKG rate formula by using the counting rates and the phase error rates of each 
intensities based on this expansion. For this purpose, we generalize mean value theorem 
and the concept of "difference". In the conventional mean value theorem, we treat the 
derivative of a given function / and the difference between outcomes of the function / 
in two points. In this paper, we extend the concept of "difference" to the case of n + 1 
points, and derive its formula based on the n-th derivative. We also derive a formula 
for the generalized "difference" . Using these formulas, we give concrete forms of k + 2 
basis states and showed their positivity. We also derive a formula for estimating the 
counting rate and the phase error rate of the single photon state from the counting rates 
and the phase error rates of signal and decoy state. Then, the AKG rate formulas with 
BBL formulas are obtained. Moreover, we numerically compare the AKG rates of the 
cases of k = 2, 3, 4 and the universal upper bound in a proper model. As our result, the 
AKG rates of the case of k — 3 attain the universal upper bound within 1% error in 
casein the forward and reverse error case. That is, further great improvement cannot 
be expected even if the number k increases more than 3. 

The organization of this paper is given as follows. Section [2] gives the AKG rates in 
both the forward and reverse cases as conjectured by BBL [17], taking into account 

| Indeed, if we use a good code instead of random coding, there is a possibility to improve this bound. 

However, if we use random coding it is impossible to improve the universal upper bound. 

§ For the case when the intensity fluctuates, see the papers [HJ [20] and the back note [26] of the paper 
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the effect of dark counts. In Section [21 we treat the universal upper bound in a 
proper channel model. In Section [H we review the results by Wang [121 Ej? Ma et 
al.[13]. In Section [51 we generalize Wang's expansion of the phase-randomized coherent 
state Y^=o 6 n\ l n )( n l- I n Section [61 we give a lower bound of AKG rate based on 
the counting rates and phase error rates of respective intensities. In Section [71 we 
numerically compare the AKG rates in the case of k = 2,3,4 and its universal upper 
bound. In Section [HI the generalized "difference" is introduced, and all theorems are 
proved. 

2. AKG rates with dark counts effect 

When the transmitted pulse is given as a mixture of the vacuum, single-photon, and 
multi-photon, taking into account the effect of dark counts in the detector, BBL[T7j 
conjectured the following AKG rate by use of Lo[16]'s conjecture, which is proved 
by Koashi [18] and Hayashi [22] with the threshold detector independently. Further, 
Hayashi [22] allows loss of detector if it is independent of the measurement basis. That 
is, we assume the same receiver model as Hayashi [22J . Let q° and q 1 be the probabilities 
detecting the the vacuum state and the single-photon state except for dark counts in 
detector. Let /i be the intensity of the signal pulse, which produces the raw keys. Then, 
We denote the dark count rate in the detector, the phase error rate concerning the 
single-photon state counted except for dark counts, the bit error probability of signal 
pulse, and the counting rate of signal pulse by po, r 1 , s^, and respectively. When 
we use the phase-randomized coherent light with the intensity /i, e -M and /ze~ M are the 
probabilities generating the vacuum state and the single-photon state. In this case, 
Eve has no information concerning Bob's bit of the pulses detected by dark counts and 
Alice's bit of the pulses whose state is the vacuum state. Hence, the AKG rate with 
the forward error correction is different from that with the reverse error correction, and 
they are given as follows. (See BBLJT7J or Section IV A of Hayashi [22].) 

U ■= ~ (/xe-V(l " W)) + e-»(q°+p D ) ~ PtfM) W 
:= \ {^-^(l-Kr^+pn-p^)) , (2) 

where r](s) is chosen so that 1 — r](s) is the coding rate of the classical error correction 
code and h(x) is given by 

- = f -x log 2 x-(l-x) log 2 (l -x) if x < \ 
[1 if x > \. 

In the above formula, we regard the simultaneous event of a dark count and a normal 
count as a dark count. This is because the collision of both photons disturbs the 
information of the normal count. 

These are the rates per one pulse sent by Alice. Thus, the coefficient | corresponds 
to the probability that the basis of Alice coincides with that of Bob. For protocols 
attaining these rates, see Hayashi [22] . 
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The dark count rate in the detector should be measured before the sending the 
quantum communication. In the above formulas, the parameters q°, q l and r 1 are not 
known a priori. These cannot be estimated if only the pulse with the intensity \x is 
transmitted. In the decoy method [10J, we randomly change the intensity \x and estimate 
these parameters from the counting rates and error rates of individual intensities. In 
particular, the parameter q° can be estimated by the counting rate p of the vacuum 
pulses so that we obtain q° = Po — Pd- Once the parameter q° is fixed, both the AKG 
rates I_> and J<_ are given as monotone increasing functions concerning q l (l — hir 1 )). 
Hence, the remaining problem is the estimation of the parameters q 1 and r 1 , which is a 
more complicated problem. 

In order to calculate these parameters, we need simultaneous equations concerning 
the individual intensities, in which the counting rates except for dark counts in detector 
and error rates of individual number states are treated as the unknown parameters. For 
simplicity, we assume that the counting rate except for dark counts in detector does 
not depends on the basis. Then, we let q n be the counting rate of the state \n)(n\, 
and r n be the error rate of the state |n)(n| with the x basis. Note that q 1 = q l and 
f 1 = r 1 . Letting pi be the counting rate of the intensity fa, and s» be the error rate of 
the intensity /ij with the x basis, we obtain [IT] 

oo n 

p l =e-»>(p -p D ) + e-»>Y,^<i n + Pv ( 3 ) 

n=l 

1 °° U n 1 

s l Pi = e-^-( Po - Pd) + e~ w ^ + 2 PD (4) 

- n=l 

for i — 1, . . . , k and 

< q n < 1, < f n < 1. (5) 

That is, our task is to calculate the minimum value I(p,s) of — hir 1 )) under the 
conditions PJ, and 1 — p D > q n > 0, 1 > f n > 0, for given vectors p = (pi, . . . ,pk) 
and s = (si, . . . , s fc ). 



3. Universal upper bounds on concrete noise model 

In a real optical communication system, when the intensity is /z, the dark counts rate in 
the optical fiber or the detector is p , which is equal to the counting rate of the vacuum 
pulse, the counting rate Pi and the error rate Sj are given by 

Pi = p i+k = p(fii) := 1 - e~ a ^ + po (6) 
a (l- e -^) + lpo 

Si = s i+k = s{fii) := — r , (7) 

where the parameter a is the counting rate of the single photon except for dark counts 
in the the detector or interfusion on optical fiber, and the parameter s is the error rate 
of single photon for normal detection. In an implemented channel, the parameter is 
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given by the function of the length of transmittance L as 



a 



a-iL + ar, 

0. \Q— L TB- SL . 



(8) 



where 9 is the efficiency of the detector, do is loss coefficient in the detector, and a± is 
loss coefficient in the communication channel. When the detection probability of the 
n-photon state is 1 — (1 — a) n + p , the relation (jSJ) holds. When the error probability 
of the n-photon state is 

q 1 = a + po — Pd and r 
obtain 



3 (i-(i- Q ,)~)+i po 

l-(l-a)"+p ' 
I _ sa+\(j> -p D ) 
a+po—pn 



the relation (jTJ) holds. Hence, the quantities 
satisfy the conditions (jSJ) and PJ. Thus, we 



nm> w) < (« + (po - pd)){i - H sa+ J {po ggl )), 

a + (Po - Pd) 

where = (p(/ii), . . . ,p(Hk)), = (s(£ti), . . . , s(/i fe )). Therefore, applying flTJ and 
(J2J), we obtain the following universal upper bounds of the AKG rates in the forward 
and reverse cases: 

1 



I^(fj,;p ,p D ,a,s) := - 



^(a + ( P0 -p o ))(l-M ^fa^ )) 

« + (Po - Pz?) 

s (l_ e -^) + i po 



+ e^p -(1-e 



■Po)v(- 



e~ a » + po 



(9) 



I^(fi;po,p D ,a,s) 



1 \ —jii , / \\ /-i r ^«+ |(po-Pd)^ 
- /ie M (a + (po -p D ))(l - h( -j — )) 



+ Pd 



-CtfJ, 



a + (p - p D ) 
s{1 - e~^) + \po 
1 - e- a ^ + po 



(10) 



respectively. 

When po = p D = 0, both rates are equal to 



i(Aie-"a(l - ~ (1 
which can be approximated by 

i( M e-M a (l-I( s ))-(l 
when a is sufficiently small. 



-apt 



)h(s)), 



Ms)) 



^ ^(e^ - (l + e-^)h(s)) 



As is shown in Appendix C the optimum intensity is characterized as 

argmaxJ^(/i;p ,PD,a,s) < 1 (12) 

argmax J^(/i;p ,PD«, s) < 1. (13) 

If we choose intensities of decoy pulses suitably, the estimated parameters q 1 and r 1 are 
close to a and s. Hence, it is suitable to choose the intensity of the phase-randomized 
coherent light producing the raw keys among the interval [0,1]. 
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4. Wang's expansion 

We review the previous results concerning the estimation of the parameters g 1 and r 1 . 
In this section, we consider only the case of pr> = because these results treated only 
this case. In order to avoid infinite number of unknown parameters in ([3l), Wang [T2] 
proposed the following expansion of the states ^^L e~ Mi ^j|n)(n| in the case of k = 2: 



oo n 

Y e -mV±\ n )( n \ = e -w| )(0| + e-^/xi|l)(l| + e-^n\n 2P2 (14) 

n=0 

oo n 

y2e->»^\n)(n\ = e-»*\0)(0\ + e -^/x 2 |l)(l| + e^ 2 // 2 ^ + e^ 2 /^ - Ml )n 3 p 3 ,(15) 



71! 

71=0 

where 



02 



Pa 



1 — 

7rE^Vl n >< n l, as) 

n=2 

£E^Tl»>W (17) 
n 2 := ^(^-(i + ^i)) (18) 

^ := - (1 + Ma + f )) - - (1 + Mi + f ))• (19) 

M2 ^ Mi ^ 

Based on this expansion, we define the parameters q 2 ,q 3 ,r 2 , and r 3 as 

00 

q j :^Trp j ^2q n \n)(n\ (20) 

n=2 

00 

r j q j := Tr ^ ^ q n r n \n) (n\ (21) 

n=2 

for j = 2, 3. Then, we have the following equations instead of ([3]) and (jSJ): 

Pi = e~ w p + e^Mig 1 + e^^q 2 (22) 
P2 = e^po + e-n^q 1 + e'^^q 2 + e~^^ 2 - /ii)fi 3 g 3 (23) 
< q j < 1 for j = 1, 2, 3. (24) 

Wang [12] gave a lower bound of g 2 in the following way. First, he calculated the 
maximum value q\j of q 2 with the conditions (1221) . ( 1231) . and g 1 , g 3 > 0: 

% = tt( ( =^ ) + ) 

"2 M2 - Mi M2e ^ 2 pi Mi M2P1 

Using ff22l . he essentially obtained a lower bound g2, m in of g 1 : 

I -lil \ P^ I -U2 \ 

g 2 ,min := — f r(pi - e w p ) ; r(p 2 - e M2 p )- 

M1IM2-M1) M2IM2-M1) 



Wang [T4] also obtained an upper bound &i imax of q 



1^.1 



_ sipie^ 1 - ip 

"l,max • • 

Mi 
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On the other hand, Ma et al. [33] treated the case where only two kinds of intensities 
are used for estimation of q 1 and r 1 . Their results can be translated into our case of 
k = 3 by putting the counting rate po of the vacuum pulse into the parameter q°. 
Assume that /ii + /i 2 < /i 3 , Hi + fi 2 < 1) and fi\ < /i 2 < ^3- Then, they obtained an 
lower bound of q 1 : 

hApi^ 2 - pie 1 * 1 - ^A(p 3 e^ - p )) 
V 1 > Ql ■= 2j _ 2 , (25) 

and an upper bound of q l r l : 

i i . ,i,2 s 2 p 2 e M2 - sipie^ 
gr < o r ? := . (26) 

(JL 2 ~ Hi 

Taking the limit \L\ — > 0, they obtained the the lower bound g 2jm i n of g 1 in the case of 
k = 2. Also, similarly, they independently obtain the upper bound &i >max of g 1 r 1 . 

Consider how tight the bounds g 2jm i n and &i )max are. As will be mentioned in 
Theorem [21 the minimum value of q 1 under the conditions (1221) . (1231) and 1 > q 2 , q 3 > 
is calculated as 

Qmin = max {92,mim <7l,min}, 

where 

gi,min := — (pi - e" Ml p ) - e~ Ml /i 2 fi 2 . 
Hi 

Similar to (|22p and (1231) . instead of (jlj), the relations 

siPi = e^ 1 y + e-^/ngV 1 + e^/i^gV (27) 

s 2 p 2 = e"" 2 y + e-^/xagV 1 + e^/i^gV + e~ M2 /i 2 (/i 2 - /ii^gV 3 (28) 

< gV < 1 for j = 1,2,3 (29) 

hold. Then, the maximum value 6 m 2 x of gV 1 under the conditions f[2"7]) . (|28p . and 
1 > g 2 r 2 , g 3 r 3 > is calculated as 

6 m 2 x = min{6i imax , 6 2 , max } 

where 

u 2 e Ml j Uie^ 2 1 

&2,max := — - f r(siPi - -e _m p ) 7 r(-s 2 p 2 - -e^ 2 p - z^hWhi - A*i)fi 3 )- 

/ii(/i 2 -/ii) 2 A*2(A*2 — 2 

From (T27D, 

s^e^ 2 - Sipie w = (// 2 - /ii)?V + (// 2 - ,u 2 )ft 2 g 2 r 2 + /i 2 (/i 2 - /ii)ft 3 g 3 r 3 . 

Since — /i 2 )fi 2 g 2 r 2 > and /i|(/i 2 — Ati)^3g 3 ?" 3 > 0, we obtain > q x r l . Hence, 
b]f > i.e., the bound 6 m 2 x is better than b]f . 



Wang [M] proposed that the vacuum pulse and two kinds of intensities are used 
for estimating the parameters, and another intensity is used for signal pulse. In this 
method, it is possible to use the counting rate and the error rate of the signal pulse. 
Hence, it can be expected to improve the AKG rate by taking into account the the 
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counting rate and the error rate of the signal pulse. That is, it is needed to discuss the 
case of k = 3. In this case, Ma et al.'s bound q]f can be applied. There is a possibility 
to improve existing bounds by extending Wang's expansion ( fl4l) and ( |T5i) to the case of 
k = 3. Further, as was pointed out by Ma et al.|13]. we can expect that the AKG rates 
are close to the upper bounds I-,(fi;po,pD,o:,s) and I^(fi;po,pD,C(,s) if the number 
k of intensities is sufficiently large. In the following section, we concentrate to derive 
better estimates of q 1 and r 1 ? 1 . 



5. Convex expansion of mixed state Yl^o 6 n\ 
5.1. Extension of Wang's expansion 

In this section, we give a convex expansion of the phase-randomized coherent state 
2~^n^=o e n\ l n )( n l as an extension of Wang's expansion CHI) and fTTol) : 

Theorem 1 Assume that \i\ < . . . < Define the basis state pi (i — 2, . . . , k + 1) as 

oo 

* : =o:E^»0 



Vti ' n! 

t-1 ,.n-2 



j=i [U=i,t^Mj-M 



i+l n-2 



' n! 

n=i 

Then, pi is positive semi- definite, and 

oo n 

e_W E = e_Ml ( |0)(01 + + 110* - ^«Pn) (30) 

n=0 ' n=2 t=l 

iVote t/iat the coefficient $ XX^^i — f^t)^n is positive. 

The quantities Q2 and f2 3 coincide with those defined in (fl8|) and (|T9|) . Hence, we can 
check that the above expansion of the case of k = 2 reproduces Wang's expansion (1141) 
and ffl5|) . Further, ^4 and are calculated as 

//|(/i 2 - /xi) 2 6 



and 



fir, 



1 ( e M4_ 1 _ /X4 _M4 ^4 /4 



A*i(M4 — M2) (A** — 2 6 24 

/i|(/i3-^2)(/i3-pi) 1 ^ 2 6 24' 
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+ fifa - to)(li2 - IHV ^ 2 2 6 24 J 

1 (^-1-^1-4-^-^)- 



//f(// 3 -/ii)(// 2 -A*i) 2 6 24' 

In order to estimate the parameters g 1 and r 1 , we introduce new parameters 
g 2 , . . . , g fc+1 , and r 2 , . . . , r fc+1 by 

oo 

g j := Trpj^tf |n)(n| (31) 

n=2 

oo 

rV := Tr Pi ^ gV» (n| (32) 

n=2 

for j = 2, . . . , k + 1. Hence, instead of (j3J) and (jlj), as a generalization of ( 1221) . ( I23i) . ( 1271) . 
and (!28|) we obtain the equations: 

fc+i 

J'=0 

fc+1 , 

3=1 

for i — 1, 2, . . . , k, where 

P:=( l ° ° 
I Y Z X 

and the fc-dimensional vectors Y and Z and the k x k matrix X are given by 

0? n«Ii(^ - Vt)e~^n j+1 if j = 1, . . . , % 

iij = i + l,...,k 

for i = 1, . . . , k. 



Y 


:= e~ m 


Zi 


:= /^e" 




. / ft 
' 1° 



5.2. General case 

In the previous subsection, we treat the case where po = and the counting rates and 
the error rates of the x basis are equal to those of the + basis. Since the average state 
of the state pj with the x basis is different from that the + basis, we have to treat the 
parameter g J+fc of the + basis as a parameter different from the parameter g- 7 of the x 
basis in the general setting. In this subsection, we extend the discussion of the above 
subsection to the general case. Let g" and be the counting rate except for dark 
counts in detector and error rate of the number state |n)(n| with the x basis, and g+ 
and f™ be those with the + basis. Instead of ( |3T|) and ( 1321) . the parameters g 2 , . . . , g 2fc+1 , 
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and r 2 , . . . , r k+1 are introduced by 

oo 

n=2 
oo 

<f + *:=Tr Pi ^g»< 

n=2 

oo 



n 



n\ 



(33) 
(34) 
(35) 



n=2 



for j — 2, . . . , k + 1. That is, the upper index j has the following meaning: 

j = 0: The vacuum state 

j = 1: The single-photon state 

j — 2, . . . , k + 1: The state pj with the x basis 

j — k + 2, . . . , 2k + 1: The state pj_fc with the x basis 

Note that g- 7 is the rate of counting except for dark counts. Instead of fl33|) - fl35l) . we 
have the relations 

2Ai+l 
3=0 

, 2k, and 

fe+i 



for z = 0, 



1 



3 r j + ~(py+ PD ), 



(36) 



(37) 



for i = 1,2, ... ,k. In addition, r % belongs to [0, 1] for i = 1, . . . , k, and q % belongs to 
[0, 1 — pd] for i — 0, . . . , 2k + 1 because the dark counts occur with the probability po- 
Therefore, we can estimate of the ranges of q l and r 1 from these conditions. Here, we 
defined the matrix (P-)i=o,...,2k,j=o,...,2k+i defined by 

/ 1 \ 



P :-- 



\ 



Y Z X 

Y Z X 



where the /c-dimensional vectors Y and Z and the k x k matrix X are given the above. 
For examples, this matrix in the case of k — 1, 2, 3 is given as 





( 


1 












^ 










Pi = 






p x e~ 


-mi 


e" 







> 










\ 




Pie" 


-ah 







e~^n\n 2 j 












( 


1 































pie" 


-mi 


e" 


" M1 p 2 fi 2 















P2 = 




e -M2 


p 2 e~ 


"M2 


e" 


-^ 2 P^2 




- Pl)fi 3 














e -Mi 


pie" 


-Ml 












e-^p\VL 2 









\ 


e -M2 


P2e" 


"M2 












e-^fi 2 2 Q 2 


e-^fi 2 2 {fi 2 - 


A*l)^3 / 
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/ 


1 
1 


u 




n 
u 


n 
u 




n 
u 


u 


n 
u 




n \ 




e ^ 




"Mi 




u 




u 


u 


u 




n 
U 






/i 2 e" 


-/<!> 






/ii)n 3 






















-M3 




e~ M3 ^(/i 3 - 




* 















e -w 


/iie" 


"Ml 



























/i 2 e" 


"M2 















e _/l2 /i|(/i2 - 


/il)^3 





\ 


e -M3 


/i 3 e" 


-M3 















e^/iK/is - 


Ml) ^3 


* / 



where 

* = e _At3 (/i 3 - /ii)(/i 3 - /i2)^4- 



6. Asymptotic key generation (AKG) rates 

In this section, based on the expansion (J30l) . we derive a lower bound of I(p, s). Since the 
matrix P- has no inverse matrix, it is impossible to derive q 1 and r 1 from the conditions 
(|36|) and fl37j) uniquely. Then, in order to evaluate I(p,s), we introduce the quantities 

9mfn and & max 

Pi = T, 2 ^ 1 p i v j + PD 

q 2 



l,k 
^min 



mm 



9=(<Z°, 



„2fc + l^T 



' l.fc 



max 

6=(b 1 ,...,6'=+ 1 ) T 




1 - j?u > g°, . . . , (/ 2fc+1 > 



SjPi 



E S 



for z = 0, 



I-Pd > b\...,b k+1 > 
k. Then, the minimum value I(p, s) can be evaluated by 



^min 

Thus, when ^ is the signal intensity, 

I (fM k e-^I(p, s) + e->* (g° + p D ) - p n vM) < I- 



(fM k e " k I(p, s)+p D - mOaJ) 



< L 



In the following, we calculate and q^ in as follows. 
Theorem 2 Define the quantities g^mm; Qk+j,min, and 6j >max by 

E*=i$(Pi -Pr» - e~ w (p -Pd)) - (1 ~PdVi ' ' ' Vjfy+i if j is odd. 
El=i # (Pi -Pd- e _Ml (Po ~Pd)) 



(3* 



9fc- 



-j,min 



-"j, max • 



Ei=i $ '(P*+* - Pd - e M< (Po - Pd)) ~ (1 - Pd)Pi • 
ELi # (Pi+fc - Pd - e" Ml (po - Pd)) 

Ei=i #(*ift - |(PD + e"^(po - Pd))) 

ELi - |(pd + e-^(p - p D ))) + (1 - Pd)^i 



•3 ._ 



:-i) 



i/j is even. 

-\iflj+\ if j is odd^ 
if j is even. 

if j is odcL 
■ /ijUj + i if j is even. 

(41) 
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for j < k. Then, the relations 



q jMn = mm 

g=(gO,..., 9 2fc+i)T 



bj, max — max 

b={b 1 ,...,b k + 1 ) T 




(42) 



(44) 



l-p D > b 1+j > 
/jo/d. Therefore, q^ n and o max are calculated as 

q^L = max{gi imin , . . . , g 2 fc,min} (45) 
& mL = min{6 ljmax , . . . , 6 fc>max }. (46) 

In order to calculate g., im i n and 6j jmax in the channel model ([6]) and (GO), we define 
the quantity € 3 a (fi\, . . . , fij): 

• • ■ , := (-l^^^a - e-^) - a) > 0. (47) 
This quantity can be characterized by the following theorem. 

Theorem 3 We denote the j — 1- dimensional simplex and its uniform probability 
measure by Aj_i andpj^x, respectively. Then, e 3 a (fix, . . . , fij) is characterized as follows. 

e> a (jii, . . . , fij) 

fix ■■■fij f 1 — (1 — a) n+3+1 .y^-y 

= JF^ h (n + J + l)(n + j)nl ^ ^ P ^ " " " ^ " " " ^ (48) 

= A*x---MiE E /-(1-«)"K-^. (49) 

n=j+l i;>0:iiH \-ij=n—l—j 

zs calculated as 

fix ■ --fMjQj+x = e{(fix, (50) 

Using the relations (1471) and (150|1 . we can calculate g^, m in, Qk+j,mmj an< ^ ^>ax in the 
channel model (jSJ) and (J7J as follows: 

j a + (po - pi?) + 40*1 » • • • > A*j) - (! - Po)4(A*i> • • • > V-j) if J is odd - 

<?j,min qk+j,mm <j q, + (p,, _ j,^) _ ej,(^l, . . . , fij) ~ (Po ~ PdK(/*1, Vj) if j is eVen - 



sa + \(pq -p D ) + sei(fix, ...,fij) + ^-f^-e^fix, . . . , fij) if j is odd. 

sa + \{po- p D ) ~ se j a (fix, ...,fij) + (l- ±(p + p D ))e{(fix, fij) if j is even. 

From the expression (HHl) . e 3 a (fix, ■ ■ ■ , fij) is monotone increasing concerning all of 
fix, ■ ■ ■ , fij, and a. Also the expression (JI8]) implies that € 3 a (p^i, ■ ■ ■ , fij) goes to when 
fix goes to 0. That is, the upper bounds I^(fi;po,pD,oz,s) and I^(fi;p ,p£),a,s) can 

1 2 

be attained. This fact coincides with the fact that q£ goes to s when fix goes to 0, 
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which was proved by Ma et al.[13j. However, in a realistic system, it is impossible to 
take the limit Hi — > 0. Even if, we could realize such a small /ii, the estimation process 
is not robust for statistical fluctuation. Hence, in order to attain the upper bounds 
/_^(//;P0)Pd, a i s ) an d I^([1]Po,Pd,cv, s), if is suitable to fix the minimum of the width 
fii — fii-i and increase the number k. 

7. Comparison of AKG rates 

In order to compare estimates of q 1 and q r 1 , we assume that pi = Pi+k- As is mentioned 
in Section HI q]? m and b]^ give the best estimates of q 1 and g 1 r 1 among known estimates 
in the case of k — 2. 

In this section, we assume the channel model ©-([8]). As a typical case, we focus 
on the case of a\ =0.17 dB/km, which is the lowest loss values in commercially available 
optical fibres[23] a =5dB, 6 = 0.1, p = 4.0 x 10" 7 , s = 0.03% 

The minimum of the width /ij — is 0.1. For simplicity, we assume that our code 
of classical error correction attains the Shannon rate. 

Now, we compare the AKG rates with the forward error correction with exsiting 
estimates. For fair comparsion, we do not take into account the dark count effect, i.e., 
assume that pr> = 0. Then, we calculate the following values as functions of the distance 
L: 

(2) maxo.2<^ 2 /(Ai2,g2,mm(0.1, / u 2 ),&i,max(0.1)).Ma et al.[I3], Wangpl] 

(3.1) max .3< M 3^(/^3,gL 3 (0.1,0.2, y U3),6i, m a X (0.1)).Maet al.p] 

(3.2) max .3< w i(/x 3 , (0.1,0.2),6 limax (0.1)).Wang[j4] k = 3 

(3.3) max . 3<w I(// 3 , q&j^O.l, 0.2, /i 3 ), 6^(0.1, 0.2, /i 3 )). Our result k = 3 

(4) maxo. 4 < M4 /(^4,gif n (0.1, 0.2, 0.3, 6^(0.1, 0.2, 0.3,^)). Our result k = 4 

(5) max 0<At a- p + Pd, sa + \(p G - Pd))- Upper bound 

Here, in order to treat the forward error correction case with po = 0, we put q l , b 1 ) 
as q 1 ,^) := |(/ie" M g 1 (l — h(^)) + e~ lJ, p — p(/z)/i(s(/z))). In this case, we can 
numerically check that q]£ n = q 2 ,mm, qH n = g2,min, 9^1 = <74,min, b^ = 6i >max < b]f , 
^mL = ^3,max, f&L = &3,max- Here, we treat q X £ 3 , q]f \ g 2jmin , q^ n , 6 1)IIiax , 6^, 6^, 
as functions of ^1,1^2, (^3, ^4) with the model ([6]), ([7]). The transmission rates of 
the abobve six cases are given in the Fig [TJ The acheivable transmission length is 
(2)222.8km, (3.1)215.2km, (3.2)223.2km, (3.3)224.5km, (4)224.8km, (5)225.2km. That 
is, by incereasing the number k from 2 to 3 yields increasing the acheivable transmission 
length increases with 1.7 km, while incereasing the number k from 3 to the infinity yields 
increasing it only with 0.7 km. 

Next, taking into account the dark count effect, we consider the effect of increase 
of the number k of intensities with the forward and reverse error correction. In these 
comparsions, it is assumed that all detections with the vacuum pulse are caused by the 
dark count effect in the detector, i.e., po = Po- 
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L (p D =0) 



Figure 1. The transmission rate (pd = 0): From left to right, (3.1), (2), (3.2), (3.3), 
(4), (5). We cannot dintingush (4) and (5) in this graph. 

In order to discuss the forward error correction case with p^ = p , we replace the 
definitions of g 2 ,min, &i,min, <?mf n , & m L <7mfn> and b mL in tne above table because these 
depend on the value pr>- The transmission rates of the five cases (2), (3.2), (3.3), 
(4), and (5) with the forward error correction are given in the Fig [3 The acheivable 
transmission length in the forward case is (2)223. 0km, (3. 2)223. 5km, (3. 3)224. 5km, 
(4)224. 8km, (5)225. 2km. That is, incereasing the number k from 2 to 3 yields increasing 
the acheivable transmission length increases with 1.5 km, while incereasing the number 
k from 3 to the infinity yields increasing it only with 0.7 km. 



o 




195 200 205 210 215 220 225 
Transmission Length (Pd^Po* forward) 



Figure 2. The transmission rate with the forward error correction (j>d — po): From 
left to right, (2), (3.2), (3.3), (4), (5) 

In order to discuss the reverse error correction case with po = po, we replace the 
definition of J(/i, q 1 , b 1 ) as J(/i, q 1 , b 1 ) := |( / ue _M g 1 (l — h(\)) +Pd ~p(aOM s (/-0)) i n ^ ne 
above table. The transmission rates of the five cases (2), (3.2), (3.3), (4), and (5) with the 
reverse error correction are given in the Fig[3l The acheivable transmission length in the 
forward case is (2)230. 7km, (3.2)231.3km, (3.3)232.5km, (4)233.2km, (5)233.3km. That 
is, incereasing the number k from 2 to 3, yields increasing the acheivable transmission 
length increases with 1.8 km, while incereasing the number k from 3 to the infinity 
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yields increasing it only with 0.8 km. These comparisions indicate that the AKG rate is 
almost saturated in the case of k = 3. Further, these graphs (FigsdlEl and[3]) show that 
our AKG rate maxo.3 <A t 3 1(/i3, ^^(O.l, 0.2, /i 3 ), 6^ x (0.1, 0.2, /i 3 )) is better than Wang's 
proposal in the case of k = 3. 




o 

hi 



200 210 220 230 

Transmission Length (pd=Po* Reverse) 



Figure 3. The transmission rate with the reverse error correction (j>u = pq): From 
left to right, (2), (3.2), (3.3), (4), (5). We cannot dintingush (4) and (5) in this graph. 

The optimal signal intensity with the reverse error correction is calculated as Fig 



SI 



m 0.5 
c 

0) 

-p 

5 • 4 

1 0.3- 

■H 

m 0.2 



E 

■H 0.1 




190 



200 



210 220 
L (Pd=Po) 



230 



Figure 4. The optimal signal intensity with the reverse error correction (jpr> = Po) : 
From up to down, (4), (5), (3.3), (3.2), (2) 



8. Proofs of Theorems 

8.1. Generalization of the concept "difference" 

In this section, in order to prove theorems given in above sections, we generalize the 
concept of "difference". In the conventional mean value theorem, we focus on the 
difference ^ X ^~J X ~^ between two points x\ and X2 for a given real-valued function /. 
When we treat n+l points xi, . . . , x n+ i, we introduce the quantity A^ +1 (xi, . . . , x n+ \) : = 



General theory for decoy-state quantum key distribution 17 

V™^-, 1 Y=f ^ / r as a generalization of the difference. This generalized difference 

is characterized by n-th derivative by the following generalization of the mean value 
theorem: 

Lemma 1 Any n-differentiable function f on~R and any n + 1 points x\ < . . . < x n+ \ 
satisfy the equation: 

n+l 

A n f +1 (x ll . . . ,x n+1 ) = — f {n) {S^a i Xi)p n (a 1 ...a n+1 )dai...da n+1 , (51) 



-t / / ( " ,) (V'a i a: i )p„(ai...a n+ i)dai...da n+ i, 
^ Ja 



where A n is the n-th simplex, and p n is the standard uniform probability measure on 
A n . Hence, there exists a point z G [xi,x n+ i] such that 

f { ~ n \z)=n\Af\x x ,...,x n+x ). 

Its proof will be given in Appendix A Therefore, the quantity A^ +1 (xi, . . . , x n+ i) can be 
regarded as a generalization of difference. This quantity satisfies the following recurrence 
formula. 



Lemma 2 



. , A, (a?2, . . • , x n+ i) — A r Hxi, . . . , x n ) 
Af\x x , . . . , x n+1 ) = (52) 



Its proof will be given in Appendix B 



Using this formula, we can prove the following by induction: 

{J2 x?---x% if A: > 

(- 1 ) Yl if A: < 0. K ' 

%l<— l:tiH hin=fc— n+l 

In particular, when < < n — 2, 

A£ k (xi,...,a; n ) = 0, (54) 
which can be also checked by Lemma [H When k = — 1, we obtain 

AKxi,...,^) = - — - . (55) 

x X\ • • • x n 

For example, when f(x) = eX ~ e(1 j' 1 "" ; the relation (155]) yields that 

e^(//i, . . . , Hj) = (-l)^Vi • • • . . • , /ij). (56) 

Since the j-th derivative of x n is for n < j — 1, the relation (|56|) holds for 

/w = E^ + i(i-(i-«r)^. 

Using these formulas, we obtain interesting characterization of the following two 
k X k matrixes and B^. 



if i + 1 < Z 



4* 
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1 1^2-/^1 








1 ^2-/^1 n t =i(^3-^t) 
v i ^2-^1 nLiC/^-/^) 

/ 1 









\ 



1 



Ai2-Ml 
1 





1 



114=1,^1(^1 "Mi) Ili=l,^2(^2-Mt) n t =l, 7 £3(M3-Mt) 



\ nt=i,^i(w-Mt) nJu^o^-Mt) nLi.^s^-Mt) 









rit=i^fe(Mfe-Mt) / 



where A^, is the 2-th column vector of the matrix and is the i-th row vector of 
the matrix B^. 

These matrixes play an important role in the proof of Theorems [I] and [2], and are 
the inverse matrixes of each other, i.e., 



1.1' 



i=l i=V Ylt=l,t^i(^i ~~ Vt) 

which is equivalent with 

k 

^ B k:l A k:i' = &i,V- 
1=1 

The equation ( 1571) is trivial in the case of /' > /. When V <l, 



1 



(57) 



(5f 



(59) 



~}< Ilt=l,t^i(^i ~ V>t) i=v Yit=l' ,t^i(Vi ~ Vt) 

Applying Lemma [1] to the case of n = I — I' + 1 and f(x) = 1, we can show that LHS of 
(|59l) is equal to 0. 

Now, we modify the matrix A k as follows: 

±- if I = 1 

CL:= <! fc^-Mt) if 2</<z + l 
if z + 2 < Z. 
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/ - 1 



Git 









i 1 fi 2 - Hi o 



i iL%-\ii nLi^s-^) 

V j- h 1 nz-vi n?=i(^3-^) 

f AO Al A2 A3 ... Ak-l \ 

y A k A k k A k A k ) > 









\ 



Ylt-i(vk-vt) ) 



where 



( i \ 
j_ 

J_ 

l«3 



V - J 

The inverse matrix C k x is characterized as follows: 



( 6 T \ 

Bk:l 
Bk:2 
Bk:3 



( ■ ■ ■ HkBk-k \ 

— ■ ■ ■ HkBk-.k 

fi3fl4 ■ ■ ■ fIkBk;k 
—fJ,4fJ>5 ■ ■ ■ ^kBk-.k 



\ Bk-.k-l J \ ( — 1) l [ikBk:k J 

The equation (pOl) can be checked as follows. Using ( 1551) . we obtain 

k 

H!fi 2 ■ ■ ■ HkB k: kA° k = 2j(-l) 



fc-i Hi - ■■ Hk c 1 =1 



i=l 



Since 



B k :i-iA° k = 



rii=i,^i(^ - ^) 
1 (— I)* -2 



■1) 



we have 

for k > i > 2. Further 

{B^-i + (-l) fc+ >^ +1 • ■■HkB k :k)A j k = B k :i-iA 3 k x = 51 
for k > i > 2, k > j > 2, and 

-(-l)ViM2 ■ ■■HkB k :k)A{- 1 = 
for k > j > 2. Thus, we obtain ( 1601) . 
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(60) 
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8.2. Proof of Theorem^ 

Now, we prove Theorem [TJ First, we check the positivity of pi, which is equivalent with 
the positivity of 7z in for i = 2, . . . , k + 1, n > 2. Substituting I — 2 and x n ~ 2 into n and 
/ (x) in Theorem [TJ we have 

l ^ u n ~ 2 
(l-2)\ %n =(l-2)\J2 T¥ ZT ' 



r- 

i-i 



j=l Ylt=l,t&(»3 ~ V*) 

r (n— 2)! 1-1 
The equation fl30l) is equivalent with 

oo n—2 ' — ^ 

/^e ^vi n )( n i = ^ e n^* ~ 



n! 

n=2 1=2 t=l 



Applying ( 1581) to the case of A; = s, any function / satisfies 

=1 j=i lli=l,t^jW ~ /^J 



When /(x) = i"" 2 and n - 2 < / - 2, /^(x) = 0. Thus, Theorem Q] yields that 
Eh< ~/(A*i) = 0- 



Therefore, 



y ^\n)(n\ = y y y It=l( ^"^ \ mm 



n=2 

Z-l 



= £110"-*) E E^r^— — -i-)h 

Z=l i=l re=Z+l j=l \.lt=l,t^j\t l r^t) 

s I— 1 oo s i— 1 

= En^ - ^) e -^wh = En^ -^) n i+ip/+i> 

Z=l t=l n=l+l ' 1=1 t=l 

which implies f )30l) . 

5. 5. Proof of Theorem [H 

Next, we prove Theorem [3 When we fix the parameter g 1+J as well as q°, the parameters 
q 1 , . . . , g- 7 are uniquely decided only from the parameters pi, . . . , pj. That is, the relation 

Pi = Yjf=o p i<l j +Pd 
1-Pd> > 

Pi = ECo lp iV +pd 

for i = 1, . . ., j 
1~Pd> q 1+j > 



q jMn := mm < q 1 

q=(q°,...,q 2k + 1 ) T 1 



mm < q 1 

q=( q °,...,qi+l)T 
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Now, we focus on parameters q 1 , . . . , qi +1 . Then, we have 

Pi-PD- ^^(Pq-Pd) 

j j—1 

s=l t=l 



for i = 1, . . . , j. Using (160]) and (jHj), we have 

j e^ / j ~ 1 

i=l & t=l 
j 

= E % fa -P°- (P° - ^)) " Vi • • • HV j+ iq j+1 . 

Note that fy+i > 0. Since < < 1 — we obtain (|42|) . Similarly, we can prove 
(SI and (HI. 



5.^. Proof of Theorem^ 

Choose / as /(a;) = gf^g^gg = -£ n=1 _ (i _ a )") x ™- 2 . Using ([53]) and Lemma 
[TJ we obtain 



oo 

111--- 



OO 



n=j+l i;>0:iiH |-i,-=n.— 1— j 

' E^! ^? - ((1 - «)W 



Mi 



2 ^ 2 rii<fc<j,fc^i(/ i * ma) 

^■■•^ /" f 1 - (1 - a) n+ J +1 ^ \ t 7 



^ ln=0 (n + j + l)(n + j)n! 
Thus, the relations (USD and (USD follow from (1561). 



Apply (jSSJ) to the case of /(x) = ^m=,+i ^^r- We obtain 



sm=j+l ml 

. n — 2 



//i • --Hjttj+i = m ■ ■ -fij V — - J+1 " ! — - = ej(/ii, . . . ,/ij), 

W llt=w s (^-^)y 

which implies ( 1501) . 

9. Conclusion and further improvement 

We have discussed the AKG rates with phase-randomized coherent light by the decoy 
method, in which the number k of possible intensities is arbitrary. For this purpose, 
by generalizing Wang's expansion, we have derived a convex expansion of the phase- 
randomized coherent state, which allows us to parameterize Eve's operation using 3k + 3 
parameters even in the general case. Thanks to this parameterization, lower bound of 
AKG rate has been obtained with k decoy intensities. Also, assuming that the noise in 
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the quantum channel is described by a natural model, we have derived upper bounds 
independent of the number k of decoy intensities as the universal upper bound. It has 
been numerically demonstrated that the AKG rate is close to the universal upper bound 
in the case of k = 3, i.e., the AKG rates cannot be improved so much even if we prepare 
a number of intensities k larger than 3. 

Further, we have discussed the intensity maximizing our upper bound of the AKG 
rate. It has been shown that this optimum intensity is always less than 1. We have 
also characterized the relationship between the AKG rate and intensities that do not 
generate raw keys. These results indicate how to choose intensities in an implemented 
quantum key distribution system, in which the decoy method is applied. Unfortunately, 
this paper does not treat the security with the finite-length code. However, we will treat 
this issue in the papers [241 EI] , in which our expansion ( |30l) and the matrix Pk play an 
essential role. 

For a further improvement of AKG rate, we can assume that some error happens in 
the generator or the detector. In this case, there is a relation r 1 = (l—ps)r 1 +ps(l — r 1 ) 
between the observed error rate r 1 in the x basis and the error rate r 1 ' out side of the 
generator and the detector in the x basis, where ps is the probability that the error 
in the x basis occurs at generation or detection in the single-photon state. That is, 

it is suitable to substitute 9 '^ 2ps in side of the binary entropy h. If it is possible to 
distinguish the error probabilities at generation and detection, a further improvement 
is available. By taking into account bit error probability among single-photon states at 
generating the pulse, a tighter evaluation of the AKG rate of the forward case may be 
possible in a way similar to Renner et al.[25j. 
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Appendix A. Proof of Lemma [T] 

We will prove (joTl) by induction. The case of n — 1 is trivial. By the assumption of 
induction, we obtain the following equations. 

/ f ( - n ~ 1) C^2a i x i )p n _ 1 (a 1 ...a n )da 1 ...da n = (n - i)\)= — - — -, (A.l) 



n+1 n+1 



I / (n 1) (y^Q^)Pn-i(Q2 • • • a n +i)da2 ■ ■ ■ da n+l = (n - 1)! ]P — — _ — 

(A.2) 
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Thus, 

„ 71+1 

/ p n -x(ai ■ ■ ■ a n)f {n ~ 1} C^ aiXi)da 2 . . . da n+1 

J^n-l j =2 

„ n 

- I f^ n ' 1) (^2a i x i )p n - 1 (a 2 ...a n+1 )da 1 ...da n 



r? 



V . f( x l) /(^n+1 

1 [ fV- - r-'t 



n 



2 n2<j<njyi(- r * X j) ri2<j<n( a 'l X j) Yl2<j<n,( Xn + 1 X 3< 



2 1 1 2<i<n,jVi 



(x^ ^j) (*^7 *^n+l)(*^7 *^l) 



/(^l) /(^n+l) 



ri2<j<n(- r l ^i) ri2<j<n,( :r ™+l X j/ 

(n-mx x.)(Y* f{Xl) I I /(Xw+l) 

\ =2 i-i-l<3<n+X,j^i\ x ^ ^JJ ll2<j<n+ll x l X J/ lll<j<n,V "+ 1 



n+1 



n 



i=1 lll<j<n+ljViV X * X i/ 



Now, we introduce new parameters b = 1 — ai or 1 — a n+ i and 6j = ^ (i = 2, . . . , n). 
Then, 

71+ 1 



(w - i)\{x n+x - xi) /( 



1 ni<j<rt+l,j^j( X i X i) 



(n-1) 
-(n-1) 



« «1 71 

/ / / (n_1) £ + ( X - b ) x n+i)db b n - 2 Pn „ 2 (b 2 . . . b n )db 2 ...db n 

r rl n 

/ / / (n_1) (X hhxi + (1 - 6)x a )d6 6 n ~V-2(&2 • • • b n )db 2 ...db n 

JA n -2 JO i=2 

- „i / n n 

(n- 1) / / /^(X) 66 ^ + i 1 ~ h ) % n+i) ~ / (n ' 1} (X 66 ^ + ( X " 
7a„_ 2 7o \ i=2 i=2 

d& b n ~~ 2 p n _ 2 (b 2 . . . b n )db 2 ...db n 

p rl rl n 

(n-l)(x n+1 -x 1 ) / / fW^bbtXi + (1 -b){x n+1 -x 1 )s +{l-b)x 1 )ds 

7a„_ 2 7o Jo i=2 

db (1 - b)b n - 2 p n _ 2 (b 2 . . . b n )db 2 ...db n 



71+1 



1 /" 

= -{xn+x ~ x i) I f {n) Cy^CiXi)p n (bi . . . b n+1 )dci . . . dc n+ i (A. 3) 

In equation (IA.3I) . we introduce parameters c\ — (1 — — s) q = bbi (i — 2, . . . , n), 
c n+ i = (1 — b)s, and use the relation (1 — b)dcidc n+ i = dsdb. The coefficient - in (|A.3[) 
can be checked by the relation 

/ / / dsdb(l-b)b n - 2 p n „ 2 (b 2 ...b n )db 2 ...db n = -z ~ . 
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Appendix B. Proof of Lemma [2] 

Since -, tt r = ( — — ) — - — , A7 +1 (xi, . . . , x n +i) is calculated as 

(x i -x 1 )(x i -x n+1 ) \Xi-X n+1 Xi— xi I x n+ i— XI ' t K ' ' n ^ L > 

follows: 



A^ +1 (xi, . . . , x n+ i) 



f(Xj) f(Xi) f(x n +l) 



(xi - xi)(xi - x n+1 ) H] =w (xi - Xj) nSfai - x i) nj=i(^+i - x 



r- 

n 



_1 f(xj) 1 y- f(x 

, _ X1 ^ rr n+1 („. _ 



| 1 /(gp 1 f(x n +i) 

X\ — Xn+i rij =2 ( ;r l — Xj) Xn+1 ~~ X\ rij = 2( a; 7i+l — Xj) 
1 A^(x 2 , • • • , 2„+l) — A"(iCi, • • • , X n ). 



Xn+1 2*1 X n _|_i Xx 

Appendix C. Proof of (02J and ( TT3l ) 



It is sufficient to show 

dI^(fi;p ,p D ,p s ,a,s) 



dp, 

dI^(ii;po,PD,Ps,at,s) 



d/j 



|u=i < (C.l) 
U=i < 0. (C.2) 



From the assumption, the parameter s' also satisfies < s' < 1/2. Hence, 

is monotone increasin 
dI^(fi;p ,p D ,ps,a,s) 



.'(l- e -ag }+ lp 

— i — -qm + — J 1S monotone increasing concerning p, i.e., ^ — > (J. bmce 



d\i 

1 (m ..\_- u ,_ , w / -i T, sa + |(Po -Pd). 



(1 - ^e-^a + (po - Pd))(1 - fe( , ^" / )) 
2 V « + (p -Pd) 

_ e - >0 _ (1 _ e -^ + Vo) d J^M± _ e ^(i-<-») + fr>. 

v ' d[i v 1 - e- a ^ + p ' 

d/^(/i;p ,pD,ps,a,g) 

1 ..\_-u/_ , _ w /i T/ sa + |(Po - Pd) 



(1 - ^e-^a + (po - p D ))(l - h( 
2 V a + (po - Pd) 

- (1 - e-^+pp) 1 ^r^" - e-^fe( 3(1 ~ e ) + lP ° - 
v y d/x v l-e-^+po ' 

we can check (ICTT) and (}Cl2l) . 
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